Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/323830333a646538303a343030303a3a2f33382d3634203d3e203532343638.roa
File:                     323830333a646538303a343030303a3a2f33382d3634203d3e203532343638.roa (raw, json)
Hash identifier:          +/8J1DMBdQIYx8UKbjndssp33HlZFOnB3cWHNo4BMQA=
Subject key identifier:   79:14:E0:17:BF:87:50:EA:D5:06:E1:FA:33:B2:9B:E1:F9:9F:B6:13
Certificate issuer:       /CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
Certificate serial:       51E962702E160AD1E05E8EC3448D9DE3AED649BC
Authority key identifier: 63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/323830333a646538303a343030303a3a2f33382d3634203d3e203532343638.roa
Signing time:             Fri 01 Nov 2024 13:35:00 +0000
ROA not before:           Fri 01 Nov 2024 13:30:00 +0000
ROA not after:            Fri 31 Oct 2025 13:35:00 +0000
asID:                     52468
IP address blocks:        2803:de80:4000::/38 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e9:62:70:2e:16:0a:d1:e0:5e:8e:c3:44:8d:9d:e3:ae:d6:49:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631ADD36A3A071B54A98E2664662D6CDCD1464FA
        Validity
            Not Before: Nov  1 13:30:00 2024 GMT
            Not After : Oct 31 13:35:00 2025 GMT
        Subject: CN=7914E017BF8750EAD506E1FA33B29BE1F99FB613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0a:69:2b:0f:90:1a:d4:16:b3:77:ba:59:0b:
                    31:96:4b:e3:2b:5d:28:b0:43:28:ca:10:af:a0:e2:
                    00:d9:ca:9d:27:01:e6:d6:cd:06:d2:7e:f3:64:96:
                    13:3c:8c:7a:8f:da:be:7a:09:f3:97:10:c2:8a:e4:
                    63:c0:21:22:ef:a3:33:f5:5d:89:9a:61:09:0b:fc:
                    8c:f9:e1:29:0c:3f:77:9f:65:a7:9a:fe:8b:87:28:
                    0b:61:64:cb:9a:33:3e:60:a9:33:26:e3:4d:f9:16:
                    89:98:eb:71:7d:95:ed:8b:59:2a:c8:5d:d1:6f:10:
                    a5:cc:1b:24:89:e3:24:4d:67:d9:f5:ba:0f:b5:19:
                    66:00:43:7e:64:0b:25:20:3e:0f:96:c7:51:4c:0d:
                    a5:f1:16:0a:f8:b9:55:4f:e5:3b:d5:d5:67:3d:64:
                    8b:80:69:30:cc:06:5a:60:74:8f:eb:d0:56:0b:00:
                    35:5b:1d:d1:17:f5:48:c6:55:07:1b:2f:9a:1b:94:
                    ec:4f:5c:ba:93:33:48:33:ec:e5:44:a5:2c:ac:b9:
                    eb:81:ec:0b:ca:ff:67:c3:37:ca:15:92:4d:b8:a2:
                    e9:05:2c:d5:8f:63:fc:b7:39:e7:96:59:31:4e:d5:
                    59:9e:33:3d:33:1a:5d:48:b0:f9:16:c4:f4:00:fa:
                    57:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:14:E0:17:BF:87:50:EA:D5:06:E1:FA:33:B2:9B:E1:F9:9F:B6:13
            X509v3 Authority Key Identifier:
                keyid:63:1A:DD:36:A3:A0:71:B5:4A:98:E2:66:46:62:D6:CD:CD:14:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/631ADD36A3A071B54A98E2664662D6CDCD1464FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F92341DF5428F667D72D258E9269AE1D063A928E91F2FE1A631B89D9808E00B7/0/323830333a646538303a343030303a3a2f33382d3634203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:de80:4000::/38

    Signature Algorithm: sha256WithRSAEncryption
         40:d5:4f:f3:a9:60:13:fc:99:f2:0e:5f:84:71:4f:c4:a1:ce:
         63:79:1c:b0:29:2b:eb:4c:25:d7:00:bc:98:ac:fb:ce:c4:99:
         55:c4:5d:22:22:69:b7:d9:fe:b9:40:4c:29:ed:43:43:f5:1e:
         80:4b:70:fc:47:b4:2a:b8:e2:8d:3f:8f:02:af:ed:8c:6f:ee:
         78:5e:e2:71:60:f4:38:57:27:0d:4e:23:89:f3:85:f2:a4:07:
         13:ee:7b:92:a1:77:04:9e:2f:3e:10:c5:d5:10:d7:07:7b:e5:
         65:46:6f:94:02:75:15:87:18:4c:a8:3d:50:50:4b:fb:2f:74:
         6f:27:11:99:89:77:b1:9a:2a:bb:17:6d:b9:7b:9b:19:00:a3:
         11:58:10:93:bf:ff:42:37:1a:62:e7:80:a8:55:98:55:56:f6:
         a2:46:e4:d7:04:60:45:cf:88:77:4e:18:2c:7f:76:90:73:ee:
         35:7d:70:93:2d:d6:32:3c:c6:80:37:5f:35:38:d6:92:34:ba:
         ad:b5:56:97:a5:83:47:93:e2:4c:86:3c:03:84:20:4c:8f:8e:
         7f:8a:b3:f4:ce:c9:7a:f0:90:7d:a4:1e:49:95:a9:34:db:cf:
         2c:12:a8:aa:e7:13:a9:d5:a4:5a:fd:87:5a:42:31:72:fe:15:
         3f:3a:d0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:55 2024 by rpki-client on console-ams.rpki-client.org